Builder for live images based on Debian
Go to file
Lyndon Brown 1edc3af346 debootstrap: use --force-check-gpg
I asked for such a switch to be added in debootstrap back at the start of
2015 in #775454 as part of a review I undertook of its security. A slightly
modified patch was merged a few months later and made it into version
1.0.69.

A patch was never merged into live-build to make use of it however. Let's
do that now.

The benefit of this, as explained in #775454, is that if we want strong
security (LB_APT_SECURE=true) then should debootstrap not be able to find
the GPG key to verify things with, it will abort with an error instead of
falling back to just https downloads with a warning. Such a warning would
be easy to miss in the log output, and security could potentially be
compromised if this were to happen.

Gbp-Dch: Short
2020-03-12 14:44:49 +00:00
data/debian-cd We should add buster for release 2019-02-17 14:51:24 +00:00
debian CI: fix deploy stage 2020-03-12 14:23:56 +00:00
examples amend copyright & licensing blocks 2020-03-11 13:51:19 +00:00
frontend Revert "Test for executables: replace 'which' with more robust 'command -v'" 2020-03-12 12:32:26 +00:00
functions Revert "Test for executables: replace 'which' with more robust 'command -v'" 2020-03-12 12:32:26 +00:00
manpages Fix typo in lb_config.1 manpage 2020-03-12 12:49:28 +00:00
scripts debootstrap: use --force-check-gpg 2020-03-12 14:44:49 +00:00
share Revert "Test for executables: replace 'which' with more robust 'command -v'" 2020-03-12 12:32:26 +00:00
COPYING Switching to GPL3+. 2011-03-09 18:22:29 +01:00
Makefile fix capitalisation of some output messages 2020-03-05 20:36:54 +00:00